Executive brief
OpenC3 COSMOS Vulnerable to Directory Traversal via /script-api/scripts/ endpoint
Affected products
- RubyGems openc3-cosmos-tool-iframe
- PyPI openc3
Junglewise Threat Intelligence
CVE-2025-28384: OpenC3 COSMOS Vulnerable to Directory Traversal via /script-api/scripts/ endpoint
CVE-2025-28384 · Severity: low · CVSS 3.1 · Published 2025-06-13
Technologies: openc3 (PyPI). Vendors: RubyGems, PyPI.